VULNERABILITY INTELLIGENCE

CVE-2013-0143

CVSS score6.5 MEDIUM
EPSS probability6.97%
CISA KEVNot currently listed
Published2013-06-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references